WASHINGTON — The administration has greenlit a program to license private American cybersecurity firms to conduct offensive computer network operations against transnational criminal organizations operating abroad, according to a freshly issued presidential memorandum.
The directive tasks the Department of Justice and the Department of Homeland Security with vetting and supervising participating companies. To qualify, private entities must prove “technical proficiency, proven performance of cyber operations, facility security,” and satisfy other undisclosed benchmarks. Operations are to remain “under the control and oversight” of the government, though the practical boundaries of that control remain unclear.
Strategic Shift
The move represents a formal outsourcing of offensive hack-back authority that the federal government has historically guarded. For American tech and defense contractors already holding top-tier security clearances, the program opens a new revenue stream while potentially accelerating disruption of ransomware gangs and theft rings that burden domestic industries.
The administration’s calculus is straightforward: foreign cyber criminals drain billions from the U.S. economy annually, and the current interagency tempo is insufficient to reverse the trend. Letting cleared private operators hunt overseas networks could inject faster response times.
Sovereignty and Oversight Questions
Skeptics inside the Beltway point to tangled oversight chains. Private firms motivated by contract milestones will now operate under dual-agency supervision, with extremely limited public visibility into error rates or collateral damage to foreign infrastructure. Unlike military cyber command actions, these privately executed operations carry no uniform code of military justice accountability. Americans deserve assurance that aggressive cyber reprisals won’t escalate into wider conflict or boomerang against domestic networks through retaliatory strikes by adversary states.
Additionally, the absence of named congressional reporting mechanisms raises concerns that well-connected Beltway contractors could leverage the program to secure foreign intelligence or competitive advantage under the guise of law enforcement disruption.
The memorandum does not publicly define “criminal networks,” leaving open whether the mandate could stretch to include state-tolerated hacking groups operating from adversarial capitals. As this experiment begins, the tangible impact on the American worker — still the primary target of foreign cyber extortion — will be the metric that matters.